Description
IBM Records Manager (RM) 4.5.x before 4.5.1.1-IER-FP001 places a session token in the URI, which might allow remote attackers to obtain sensitive information by reading a Referer log file.
Published Sep 13, 2010 · Updated Sep 17, 2024 · Assigned by mitre